From 7e0582df6c2a7133964d8a9bdddd78fa1dfaddca Mon Sep 17 00:00:00 2001
From: Thomas de Roo <thomas@noreply.localhost>
Date: Wed, 23 Aug 2023 09:43:20 +0200
Subject: [PATCH] Wazuh agent toegevoegd

---
 DebianTweaks.sh | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/DebianTweaks.sh b/DebianTweaks.sh
index e11eb12..50c7d70 100755
--- a/DebianTweaks.sh
+++ b/DebianTweaks.sh
@@ -123,3 +123,12 @@ cat >> /etc/osquery/osquery.conf << "EOF"
 EOF
 systemctl enable osqueryd
 systemctl start osqueryd
+
+# Wazuh agent
+curl -s https://packages.wazuh.com/key/GPG-KEY-WAZUH | gpg --no-default-keyring --keyring gnupg-ring:/usr/share/keyrings/wazuh.gpg --import && chmod 644 /usr/share/keyrings/wazuh.gpg
+echo "deb [signed-by=/usr/share/keyrings/wazuh.gpg] https://packages.wazuh.com/4.x/apt/ stable main" | tee -a /etc/apt/sources.list.d/wazuh.list
+apt update
+WAZUH_MANAGER="siem01.de-roo.org" apt install wazuh-agent
+systemctl daemon-reload
+systemctl enable wazuh-agent
+systemctl start wazuh-agent